Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.mft
File: NIWdiibI6Ih3f06AGyC3hd7mVM8.mft (raw, json)
Hash identifier: 7WwlPHUxDMu0Kw52oS2NzQz7PNt5fnoSOkZtjXqWfSU=
Subject key identifier: 36:0C:4B:AD:6A:CD:CA:0A:69:11:A9:2F:48:05:9D:3B:FC:A9:13:67
Authority key identifier: 34:85:9D:8A:26:C8:E8:88:77:7F:4E:80:1B:20:B7:85:DE:E6:54:CF
Certificate issuer: /CN=34859d8a26c8e888777f4e801b20b785dee654cf
Certificate serial: 019A7149E332DA86EBF3884DE1F919510A91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIWdiibI6Ih3f06AGyC3hd7mVM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.mft
Manifest number: 142D
Signing time: Tue 11 Nov 2025 05:00:58 +0000
Manifest this update: Tue 11 Nov 2025 05:00:58 +0000
Manifest next update: Wed 12 Nov 2025 05:00:58 +0000
Files and hashes: 1: KBPaX26T74rF_b98D5vbCS4Nuz0.roa (hash: nU2QowOmWztQQgJHXXYPFT8tIem+quPQmedvSFuZH+I=)
2: NIWdiibI6Ih3f06AGyC3hd7mVM8.crl (hash: SC9F4+78g0uY8TYSXcRch+kZmEpIpn/jQ8MKzesfo7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NIWdiibI6Ih3f06AGyC3hd7mVM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:e3:32:da:86:eb:f3:88:4d:e1:f9:19:51:0a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34859d8a26c8e888777f4e801b20b785dee654cf
Validity
Not Before: Nov 11 05:00:58 2025 GMT
Not After : Nov 12 05:00:58 2025 GMT
Subject: CN=360c4bad6acdca0a6911a92f48059d3bfca91367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c9:a5:5a:15:f3:6f:87:36:5b:7e:6b:db:1f:
2c:f7:96:6b:88:96:0f:15:0c:82:64:41:c9:55:e0:
9d:7c:d0:d0:e2:30:83:f6:7b:f9:34:7a:f5:43:77:
bb:4c:c6:28:1e:6a:5d:f3:55:4a:94:d0:df:d4:94:
1f:2c:bf:52:4d:45:2a:00:21:03:09:57:a4:e8:9f:
ae:e1:97:74:d7:23:26:86:b7:57:7d:b3:f2:8f:c2:
bd:69:e9:97:5a:36:07:97:ee:69:2f:d9:ff:39:6e:
5f:5c:17:50:eb:83:74:e2:5f:0a:f6:87:45:73:f2:
22:51:71:42:7c:c9:09:f5:f6:44:61:8a:8a:21:9d:
39:20:65:0c:50:ec:c6:88:1e:fa:cc:06:69:b4:dc:
d3:ae:f1:b0:58:a4:99:30:f8:59:7f:02:e0:ba:f8:
4d:47:87:dc:eb:d9:a3:eb:58:13:e6:31:23:d2:f9:
55:0b:8d:cb:06:ef:9a:9e:32:fd:37:38:3a:bb:99:
5a:a2:eb:57:c5:89:4c:d0:d5:32:97:8b:06:dc:30:
6b:42:22:5d:7f:f5:ff:25:f1:3f:fd:e6:e1:25:fc:
15:85:c9:e2:e3:7c:be:3e:39:b3:61:65:4d:97:0e:
c7:4d:1a:d6:a3:4b:4f:8c:49:e7:62:11:0d:e2:c7:
6f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:0C:4B:AD:6A:CD:CA:0A:69:11:A9:2F:48:05:9D:3B:FC:A9:13:67
X509v3 Authority Key Identifier:
keyid:34:85:9D:8A:26:C8:E8:88:77:7F:4E:80:1B:20:B7:85:DE:E6:54:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIWdiibI6Ih3f06AGyC3hd7mVM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a4:ca:e4:3d:d1:7e:76:3d:07:95:24:4d:ef:a5:4e:30:a1:
b0:4d:7a:19:16:83:36:3e:b4:54:ab:d9:8e:99:4b:ad:3e:d1:
17:f1:7b:27:1a:6a:2b:4c:d1:0e:82:90:0d:30:bf:a2:ac:44:
71:8b:96:71:63:44:01:b4:f5:8b:13:e4:f7:d1:3a:d5:5a:91:
53:9d:bb:54:32:fd:3e:2a:f6:f8:6e:8a:34:d2:e6:e1:fa:d8:
d8:26:18:b4:93:64:6c:16:7c:66:a2:7d:3e:d6:45:22:3f:21:
36:06:3a:bd:52:8a:88:f6:d0:33:71:1b:cb:e5:a1:31:8a:c8:
7d:00:1f:7e:7c:df:83:b1:1b:66:ff:1c:b1:44:80:07:d4:53:
4d:0f:57:f8:dc:f4:b0:71:ae:fb:99:2f:40:db:cc:43:74:f4:
3a:46:b9:90:90:2d:12:4f:89:2f:9b:a9:a7:fc:b5:64:75:3e:
ea:e6:5b:4f:08:5d:18:e4:f6:5e:95:28:04:84:f8:f3:22:e2:
bc:2b:f5:18:6f:72:dc:7e:0f:25:57:2c:ea:6e:13:e6:41:d5:
f6:fe:0c:bc:0c:15:98:a8:08:24:1b:e9:55:df:f1:89:4b:0f:
cd:f1:13:cd:39:4e:13:e9:2f:5f:38:09:a7:e3:8e:7a:48:a3:
6a:05:0b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:27 2025 by rpki-client